$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft (raw, json) Hash identifier: rc+b0qW78S0dDLOpEUbl17d3xI5wJ3yRR0NfkfKOK5w= Subject key identifier: 4C:0F:C3:2F:4F:61:D1:F0:19:43:F1:D7:47:47:3E:E5:24:32:C7:4D Authority key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 Certificate issuer: /CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Certificate serial: 6D7BEF5941F2DE38743D3338DE0BCF3E53D115DD Authority info access: rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft Manifest number: AD Signing time: Wed 23 Jul 2025 03:06:59 +0000 Manifest this update: Wed 23 Jul 2025 03:01:59 +0000 Manifest next update: Thu 24 Jul 2025 18:30:59 +0000 Files and hashes: 1: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl (hash: NXMvvlpsvIZna3OaC/vYOPkZWePn4fDNJldpJlsl3Mk=) 2: 326130623a346530373a363065303a3a2f34342d3438203d3e203339333531.roa (hash: /JgrvpSR1ZDGP36oDONfP8baAAR4FG/skafz4v4Fs6E=) 3: 326130623a346530373a363064303a3a2f34342d3438203d3e20323134373031.roa (hash: uV2TLwh180zk/DItScOuiwKDHaU99Mhyx8m59bwZFmA=) 4: 326130623a346530373a363030303a3a2f34312d3438203d3e20323134373031.roa (hash: 4kUbGyjkNaSVg+CdxZZIcLS92ZdRbZtwjsOz4Bjkgro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Jul 2025 16:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:7b:ef:59:41:f2:de:38:74:3d:33:38:de:0b:cf:3e:53:d1:15:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118 Validity Not Before: Jul 23 03:01:59 2025 GMT Not After : Jul 24 18:30:59 2025 GMT Subject: CN=4C0FC32F4F61D1F01943F1D747473EE52432C74D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fb:0f:97:c1:72:e9:bf:9a:10:55:8e:3a:ad: 2a:ba:f1:37:1a:f4:2e:f7:c0:c1:79:37:85:b3:71: 59:22:13:b1:29:21:ea:78:ea:a0:f2:7a:1a:29:19: 21:8a:1d:b8:ae:f5:40:43:38:6c:b1:9d:5e:74:b1: 1c:a9:aa:c2:58:dc:35:63:ea:4e:85:a0:14:ee:1e: 88:1f:6a:1b:c8:c4:6c:72:80:4e:10:f8:92:c3:ec: fc:c9:0b:50:f0:1f:de:0f:89:a0:7e:b4:29:18:ba: c1:c7:1e:0b:d1:90:76:cf:ab:bf:6a:11:53:7a:d5: dd:a9:06:9d:5c:4a:88:a1:d3:e1:19:7c:a7:b8:9f: 33:bb:99:e5:23:f0:27:a8:ca:e7:e7:27:6e:5a:c8: 42:73:9c:b9:16:32:4e:30:cd:ff:f9:16:52:9b:4d: 70:2b:f8:8d:18:d4:08:85:6b:1c:0d:0a:87:03:51: d2:c0:c1:9d:95:9f:10:67:d2:19:bc:85:ab:cb:51: bc:5d:0f:1f:66:1b:5c:a8:37:3a:4c:14:28:97:bf: 10:6c:20:56:70:58:ee:5c:24:30:10:e9:52:76:77: 76:ad:d9:82:93:70:93:c3:1a:33:03:92:84:0b:5d: f2:00:c8:33:9b:2c:e5:1a:5a:89:b8:cd:c1:19:60: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0F:C3:2F:4F:61:D1:F0:19:43:F1:D7:47:47:3E:E5:24:32:C7:4D X509v3 Authority Key Identifier: keyid:DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:39:eb:15:24:0e:e9:a5:6d:fc:b4:ad:fb:9c:41:46:02:16: 59:81:dc:b8:89:a7:ab:4a:a5:98:4b:cf:29:e8:75:fd:f4:3f: 9f:05:8c:fa:34:b4:81:55:e0:67:2c:dc:a7:89:80:a6:8c:c7: 20:83:a3:c7:32:a8:30:eb:45:31:a6:28:1b:e9:b6:ac:36:ed: 28:26:02:e6:4e:02:4c:df:cb:96:99:8c:07:51:5a:24:92:b1: b4:72:3c:3d:a1:8a:f8:9e:43:9c:8c:7f:f9:90:7f:a1:5b:0f: 24:c5:07:e0:f0:d4:31:6d:fe:67:e5:5e:90:01:17:08:62:fa: 33:d1:e5:13:68:f2:96:33:8c:22:43:b2:51:b5:0c:cf:40:67: b7:b3:88:51:86:b0:36:e0:1b:9f:d7:2b:1e:02:94:9a:d1:d9: 79:20:b3:17:f9:02:5e:ea:4d:96:f2:e4:62:ff:a6:f5:c6:32: af:bb:da:41:d6:7b:05:ab:e2:90:9f:e6:e6:e0:38:8e:66:67: ff:c1:5f:b8:73:5a:b1:53:79:83:fc:39:d7:9c:7c:77:23:e7: a0:e4:5e:4e:b2:83:3a:99:20:d4:8e:cf:67:10:fd:0a:ac:7a: f0:88:e8:24:a3:67:97:60:e6:0b:ad:ab:35:4a:ea:7a:8b:5b: fe:ed:c1:e4 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUbXvvWUHy3jh0PTM43gvPPlPRFd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJG RERBNDExODAeFw0yNTA3MjMwMzAxNTlaFw0yNTA3MjQxODMwNTlaMDMxMTAvBgNV BAMTKDRDMEZDMzJGNEY2MUQxRjAxOTQzRjFENzQ3NDczRUU1MjQzMkM3NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+w+XwXLpv5oQVY46rSq68Tca 9C73wMF5N4WzcVkiE7EpIep46qDyehopGSGKHbiu9UBDOGyxnV50sRypqsJY3DVj 6k6FoBTuHogfahvIxGxygE4Q+JLD7PzJC1DwH94PiaB+tCkYusHHHgvRkHbPq79q EVN61d2pBp1cSoih0+EZfKe4nzO7meUj8CeoyufnJ25ayEJznLkWMk4wzf/5FlKb TXAr+I0Y1AiFaxwNCocDUdLAwZ2VnxBn0hm8havLUbxdDx9mG1yoNzpMFCiXvxBs IFZwWO5cJDAQ6VJ2d3at2YKTcJPDGjMDkoQLXfIAyDObLOUaWom4zcEZYCEBAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUTA/DL09h0fAZQ/HXR0c+5SQyx00wHwYDVR0j BBgwFoAU3cJa0vGkiSR3E+45scA+ov3aQRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmVhZDJkY2YtZWFkNS00OTU0LWFkODQtNjU4MGNkMmE5 YzUwLzMvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERBNDExOC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzgxYTQ0NTY2NDU4ZTQ1NzhiNjdlZWQz MDUzZjgyMGY1LzEvRERDMjVBRDJGMUE0ODkyNDc3MTNFRTM5QjFDMDNFQTJGRERB NDExOC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWFkMmRjZi1l YWQ1LTQ5NTQtYWQ4NC02NTgwY2QyYTljNTAvMy9EREMyNUFEMkYxQTQ4OTI0Nzcx M0VFMzlCMUMwM0VBMkZEREE0MTE4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHznrFSQO6aVt/LSt+5xB RgIWWYHcuImnq0qlmEvPKeh1/fQ/nwWM+jS0gVXgZyzcp4mApozHIIOjxzKoMOtF MaYoG+m2rDbtKCYC5k4CTN/LlpmMB1FaJJKxtHI8PaGK+J5DnIx/+ZB/oVsPJMUH 4PDUMW3+Z+VekAEXCGL6M9HlE2jyljOMIkOyUbUMz0Bnt7OIUYawNuAbn9crHgKU mtHZeSCzF/kCXupNlvLkYv+m9cYyr7vaQdZ7BavikJ/m5uA4jmZn/8FfuHNasVN5 g/w515x8dyPnoOReTrKDOpkg1I7PZxD9Cqx68IjoJKNnl2DmC62rNUrqeotb/u3B 5A== -----END CERTIFICATE-----Generated at Wed Jul 23 08:07:34 2025 by rpki-client